mastracode 0.4.0 → 0.5.0

package/dist/{chunk-Z4QRXVST.cjs → chunk-MBPGUMYQ.cjs}

@@ -1,22 +1,20 @@
 'use strict';
 
-var chunkK4WJUBEC_cjs = require('./chunk-K4WJUBEC.cjs');
+var chunkAJEYT7X3_cjs = require('./chunk-AJEYT7X3.cjs');
 var chunkS5ZLN7DR_cjs = require('./chunk-S5ZLN7DR.cjs');
-var chunkMT3YCFCC_cjs = require('./chunk-MT3YCFCC.cjs');
-var core = require('@mastra/core');
+var chunkOEDRHUU5_cjs = require('./chunk-OEDRHUU5.cjs');
 var agent = require('@mastra/core/agent');
 var harness = require('@mastra/core/harness');
-var logger = require('@mastra/core/logger');
-var fs4 = require('fs');
+var llm = require('@mastra/core/llm');
+var fs3 = require('fs');
 var os = require('os');
-var path = require('path');
+var path3 = require('path');
 var memory = require('@mastra/memory');
 var anthropic = require('@ai-sdk/anthropic');
-var workspace = require('@mastra/core/workspace');
+var openai = require('@ai-sdk/openai');
 var child_process = require('child_process');
 var mcp = require('@mastra/mcp');
 var zod = require('zod');
-var llm = require('@mastra/core/llm');
 var libsql = require('@mastra/libsql');
 var pg = require('@mastra/pg');
 
@@ -38,9 +36,9 @@ function _interopNamespace(e) {
   return Object.freeze(n);
 }
 
-var fs4__namespace = /*#__PURE__*/_interopNamespace(fs4);
+var fs3__namespace = /*#__PURE__*/_interopNamespace(fs3);
 var os__namespace = /*#__PURE__*/_interopNamespace(os);
-var path__namespace = /*#__PURE__*/_interopNamespace(path);
+var path3__namespace = /*#__PURE__*/_interopNamespace(path3);
 
 // src/agents/prompts/base.ts
 function buildBasePrompt(ctx) {
@@ -291,8 +289,8 @@ var PROJECT_LOCATIONS = [
 var GLOBAL_LOCATIONS = [".claude", ".mastracode", ".config/claude", ".config/mastracode"];
 function findInstructionFile(basePath) {
   for (const filename of INSTRUCTION_FILES) {
-    const fullPath = path.join(basePath, filename);
-    if (fs4.existsSync(fullPath)) {
+    const fullPath = path3.join(basePath, filename);
+    if (fs3.existsSync(fullPath)) {
       return fullPath;
     }
   }
@@ -302,11 +300,11 @@ function loadAgentInstructions(projectPath) {
   const sources = [];
   const home = os.homedir();
   for (const location of GLOBAL_LOCATIONS) {
-    const basePath = path.join(home, location);
+    const basePath = path3.join(home, location);
     const filePath = findInstructionFile(basePath);
     if (filePath) {
       try {
-        const content = fs4.readFileSync(filePath, "utf-8").trim();
+        const content = fs3.readFileSync(filePath, "utf-8").trim();
         if (content) {
           sources.push({ path: filePath, content, scope: "global" });
           break;
@@ -316,11 +314,11 @@ function loadAgentInstructions(projectPath) {
     }
   }
   for (const location of PROJECT_LOCATIONS) {
-    const basePath = location ? path.join(projectPath, location) : projectPath;
+    const basePath = location ? path3.join(projectPath, location) : projectPath;
     const filePath = findInstructionFile(basePath);
     if (filePath) {
       try {
-        const content = fs4.readFileSync(filePath, "utf-8").trim();
+        const content = fs3.readFileSync(filePath, "utf-8").trim();
         if (content) {
           sources.push({ path: filePath, content, scope: "project" });
           break;
@@ -347,80 +345,117 @@ ${sections.join("\n\n")}
 
 // src/agents/prompts/tool-guidance.ts
 function buildToolGuidance(modeId, options = {}) {
+  const denied = options.deniedTools ?? /* @__PURE__ */ new Set();
   const sections = [];
   sections.push(`# Tool Usage Rules
 
 IMPORTANT: You can ONLY call tools by their exact registered names listed below. Shell commands like \`git\`, \`npm\`, \`ls\`, etc. are NOT tools \u2014 they must be run via the \`execute_command\` tool.
 
 You have access to the following tools. Use the RIGHT tool for the job:`);
-  sections.push(`
-**view** \u2014 Read file contents or list directories
+  const readTools = [];
+  if (!denied.has(chunkOEDRHUU5_cjs.MC_TOOLS.VIEW)) {
+    readTools.push(`
+**${chunkOEDRHUU5_cjs.MC_TOOLS.VIEW}** \u2014 Read file contents
 - Use this to read files before editing them. NEVER propose changes to code you haven't read.
-- Use \`view_range\` for large files to read specific sections.
-- For directory listings, this shows 2 levels deep.
-- Example: To check lines 50-100 of a large file: \`view("src/big-file.ts", { view_range: [50, 100] })\`
-
-**search_content** \u2014 Search file contents using regex
-- Use this for ALL content search (finding functions, variables, error messages, imports, etc.)
-- NEVER use \`execute_command\` with grep, rg, or ag. Always use the search_content tool.
-- Supports regex patterns, file type filtering, and context lines.
-- Example: Find where a function is defined: \`search_content("function handleSubmit", { glob: "**/*.ts" })\`
-- Example: Find all imports of a module: \`search_content("from ['\\"]express['\\"]", { glob: "**/*.ts" })\`
-
-**find_files** \u2014 Find files by name pattern
-- Use this to find files matching a pattern (e.g., "**/*.ts", "src/**/test*").
-- NEVER use \`execute_command\` with find or ls for file search. Always use find_files.
-- Respects .gitignore automatically.
-- Example: Find all test files: \`find_files("**/*.test.ts")\`
-- Example: Find config files: \`find_files("**/config.{js,ts,json}")\`
-
-**execute_command** \u2014 Run shell commands
+- Use \`offset\` (1-indexed start line) and \`limit\` (number of lines) for large files.
+- Example: Read lines 50-100: \`{ path: "src/big-file.ts", offset: 50, limit: 51 }\`
+- To list directories, use \`${chunkOEDRHUU5_cjs.MC_TOOLS.FIND_FILES}\` instead.`);
+  }
+  if (!denied.has(chunkOEDRHUU5_cjs.MC_TOOLS.SEARCH_CONTENT)) {
+    readTools.push(`
+**${chunkOEDRHUU5_cjs.MC_TOOLS.SEARCH_CONTENT}** \u2014 Search file contents using regex
+- Preferred for content search (finding functions, variables, error messages, imports, etc.)
+- Use \`path\` to filter by directory or glob pattern. Supports \`contextLines\`, \`caseSensitive\`, and \`maxCount\`.
+- Example: Find a function: \`{ pattern: "function handleSubmit", path: "**/*.ts" }\`
+- Example: Find imports: \`{ pattern: "from ['\\"\\]express['\\"\\]", path: "**/*.ts" }\`
+- Respects .gitignore by default.`);
+  }
+  if (!denied.has(chunkOEDRHUU5_cjs.MC_TOOLS.FIND_FILES)) {
+    readTools.push(`
+**${chunkOEDRHUU5_cjs.MC_TOOLS.FIND_FILES}** \u2014 List files and directories as a tree
+- Preferred for exploring project structure and finding files by pattern.
+- Returns tree-style output. Respects .gitignore by default.
+- Example: List project root: \`{ path: "./" }\`
+- Example: Find test files: \`{ path: "./src", pattern: "**/*.test.ts" }\`
+- Example: Find config files: \`{ pattern: "*.config.{js,ts,json}" }\``);
+  }
+  if (!denied.has(chunkOEDRHUU5_cjs.MC_TOOLS.EXECUTE_COMMAND)) {
+    readTools.push(`
+**${chunkOEDRHUU5_cjs.MC_TOOLS.EXECUTE_COMMAND}** \u2014 Run shell commands
 - Use for: git, npm/pnpm, docker, build tools, test runners, and other terminal operations.
-- Do NOT use for: file reading (use view), file search (use search_content/find_files), file editing (use string_replace_lsp/write_file).
-- Commands have a 30-second default timeout. Use the \`timeout\` parameter for longer-running commands.
-- Pipe to \`| tail -N\` for commands with long output \u2014 the full output streams to the user, only the last N lines are returned to you. If you're building any kind of package you should be tailing.
+- Prefer dedicated tools for: file reading (${chunkOEDRHUU5_cjs.MC_TOOLS.VIEW}), file search (${chunkOEDRHUU5_cjs.MC_TOOLS.SEARCH_CONTENT}/${chunkOEDRHUU5_cjs.MC_TOOLS.FIND_FILES}), file editing (${chunkOEDRHUU5_cjs.MC_TOOLS.STRING_REPLACE_LSP}/${chunkOEDRHUU5_cjs.MC_TOOLS.WRITE_FILE}).
+- Commands have a 30-second default timeout. Use \`timeout\` for longer commands, \`cwd\` for working directory.
+- Use the \`tail\` parameter or pipe to \`| tail -N\` to limit output \u2014 the full output streams to the user, only the tail is returned to you. If you're building any kind of package you should be tailing.
 - Good: Run independent commands in parallel when possible.
-- Bad: Running \`cat file.txt\` \u2014 use the view tool instead.`);
+- Bad: Running \`cat file.txt\` \u2014 use the ${chunkOEDRHUU5_cjs.MC_TOOLS.VIEW} tool instead.`);
+  }
+  if (readTools.length > 0) {
+    sections.push(readTools.join("\n"));
+  }
   if (modeId !== "plan") {
-    sections.push(`
-**string_replace_lsp** \u2014 Edit files by replacing exact text
-- You MUST read a file with \`view\` before editing it.
-- \`old_str\` must be an exact match of existing text in the file.
-- Provide enough surrounding context in \`old_str\` to make it unique.
-- For creating new files, use \`write_file\` instead.
+    const writeTools = [];
+    if (!denied.has(chunkOEDRHUU5_cjs.MC_TOOLS.STRING_REPLACE_LSP)) {
+      writeTools.push(`
+**${chunkOEDRHUU5_cjs.MC_TOOLS.STRING_REPLACE_LSP}** \u2014 Edit files by replacing exact text
+- You MUST read a file with \`${chunkOEDRHUU5_cjs.MC_TOOLS.VIEW}\` before editing it.
+- \`old_string\` must be an exact match of existing text in the file.
+- Provide enough surrounding context in \`old_string\` to make it unique.
+- Use \`replace_all: true\` to replace all occurrences (default: false, requires unique match).
+- For creating new files, use \`${chunkOEDRHUU5_cjs.MC_TOOLS.WRITE_FILE}\` instead.
 - Good: Include 2-3 lines of surrounding context to ensure uniqueness.
-- Bad: Using just \`return true;\` \u2014 too common, will match multiple places.
-
-**write_file** \u2014 Create new files or overwrite existing ones
+- Bad: Using just \`return true;\` \u2014 too common, will match multiple places.`);
+    }
+    if (!denied.has(chunkOEDRHUU5_cjs.MC_TOOLS.WRITE_FILE)) {
+      writeTools.push(`
+**${chunkOEDRHUU5_cjs.MC_TOOLS.WRITE_FILE}** \u2014 Create new files or overwrite existing ones
 - Use this to create new files.
-- If overwriting an existing file, you MUST have read it first with \`view\`.
-- NEVER create files unless necessary. Prefer editing existing files.`);
+- If overwriting an existing file, you MUST have read it first with \`${chunkOEDRHUU5_cjs.MC_TOOLS.VIEW}\`.
+- Prefer editing existing files over creating new ones.`);
+    }
+    if (writeTools.length > 0) {
+      sections.push(writeTools.join("\n"));
+    }
   }
   if (options.hasWebSearch) {
-    sections.push(`
-**web_search** / **web_extract** \u2014 Search the web / extract page content
+    const webTools = [];
+    if (!denied.has("web_search")) webTools.push("**web_search**");
+    if (!denied.has("web_extract")) webTools.push("**web_extract**");
+    if (webTools.length > 0) {
+      sections.push(`
+${webTools.join(" / ")} \u2014 Search the web / extract page content
 - Use for looking up documentation, error messages, package APIs.`);
+    }
   }
-  sections.push(`
+  const taskTools = [];
+  if (!denied.has("task_write")) {
+    taskTools.push(`
 **task_write** \u2014 Track tasks for complex multi-step work
 - Use when a task requires 3 or more distinct steps or actions.
 - Pass the FULL task list each time (replaces previous list).
 - Mark tasks \`in_progress\` BEFORE starting work. Only ONE task should be \`in_progress\` at a time.
 - Mark tasks \`completed\` IMMEDIATELY after finishing each task. Do not batch completions.
-- Each task has: content (imperative form), status (pending|in_progress|completed), activeForm (present continuous form shown during execution).
-
+- Each task has: content (imperative form), status (pending|in_progress|completed), activeForm (present continuous form shown during execution).`);
+  }
+  if (!denied.has("task_check")) {
+    taskTools.push(`
 **task_check** \u2014 Check completion status of tasks
 - Use this BEFORE deciding you're done with a task to verify all tasks are completed.
 - Returns the number of completed, in progress, and pending tasks.
 - If any tasks remain incomplete, continue working on them.
-- IMPORTANT: Always check task completion before ending work on a complex task.
-
+- IMPORTANT: Always check task completion before ending work on a complex task.`);
+  }
+  if (!denied.has("ask_user")) {
+    taskTools.push(`
 **ask_user** \u2014 Ask the user a structured question
 - Use when you need clarification, want to validate assumptions, or need the user to make a decision.
 - Provide clear, specific questions. End with a question mark.
 - Include options (2-4 choices) for structured decisions. Omit options for open-ended questions.
 - Don't use this for simple yes/no \u2014 just ask in your text response.`);
-  if (modeId === "plan") {
+  }
+  if (taskTools.length > 0) {
+    sections.push(taskTools.join("\n"));
+  }
+  if (modeId === "plan" && !denied.has("submit_plan")) {
     sections.push(`
 **submit_plan** \u2014 Submit a completed implementation plan for user review
 - Call this tool when your plan is complete. Do NOT just describe your plan in text \u2014 you MUST call this tool.
@@ -428,10 +463,12 @@ You have access to the following tools. Use the RIGHT tool for the job:`);
 - On approval, the system automatically switches to the default mode so you can implement.
 - Takes two arguments: \`title\` (short descriptive title) and \`plan\` (full plan in markdown).`);
   }
-  sections.push(`
+  if (!denied.has("subagent")) {
+    sections.push(`
 **subagent** \u2014 Delegate a focused task to a specialized subagent
 - Only use subagents when you will spawn **multiple subagents in parallel**. If you only need one task done, do it yourself.
 - Subagent outputs are **untrusted**. Always review and verify the results.`);
+  }
   return sections.join("\n");
 }
 
@@ -443,8 +480,15 @@ var modePrompts = {
 };
 function buildFullPrompt(ctx) {
   const modelId = ctx.state?.currentModelId;
-  const hasWebSearch = chunkK4WJUBEC_cjs.hasTavilyKey() || !!modelId && modelId.startsWith("anthropic/");
-  const toolGuidance = buildToolGuidance(ctx.modeId, { hasWebSearch });
+  const hasWebSearch = chunkAJEYT7X3_cjs.hasTavilyKey() || !!modelId && modelId.startsWith("anthropic/");
+  const deniedTools = /* @__PURE__ */ new Set();
+  const permRules = ctx.state?.permissionRules;
+  if (permRules?.tools) {
+    for (const [name, policy] of Object.entries(permRules.tools)) {
+      if (policy === "deny") deniedTools.add(name);
+    }
+  }
+  const toolGuidance = buildToolGuidance(ctx.modeId, { hasWebSearch, deniedTools });
   const baseCtx = {
     projectPath: ctx.workingDir,
     projectName: ctx.projectName || "unknown",
@@ -512,11 +556,11 @@ function getHarnessState(requestContext) {
 }
 function getObserverModel({ requestContext }) {
   const state = getHarnessState(requestContext);
-  return chunkK4WJUBEC_cjs.resolveModel(state?.observerModelId ?? DEFAULT_OM_MODEL_ID);
+  return chunkAJEYT7X3_cjs.resolveModel(state?.observerModelId ?? DEFAULT_OM_MODEL_ID, { remapForCodexOAuth: true });
 }
 function getReflectorModel({ requestContext }) {
   const state = getHarnessState(requestContext);
-  return chunkK4WJUBEC_cjs.resolveModel(state?.reflectorModelId ?? DEFAULT_OM_MODEL_ID);
+  return chunkAJEYT7X3_cjs.resolveModel(state?.reflectorModelId ?? DEFAULT_OM_MODEL_ID, { remapForCodexOAuth: true });
 }
 function getDynamicMemory(storage) {
   return ({ requestContext }) => {
@@ -539,19 +583,13 @@ function getDynamicMemory(storage) {
             bufferActivation: 2e3,
             model: getObserverModel,
             messageTokens: obsThreshold,
-            blockAfter: 2,
-            modelSettings: {
-              maxOutputTokens: 6e4
-            }
+            blockAfter: 2
           },
           reflection: {
             bufferActivation: 1 / 2,
             blockAfter: 1.1,
             model: getReflectorModel,
-            observationTokens: refThreshold,
-            modelSettings: {
-              maxOutputTokens: 6e4
-            }
+            observationTokens: refThreshold
           }
         }
       }
@@ -560,120 +598,48 @@ function getDynamicMemory(storage) {
     return cachedMemory;
   };
 }
-function createDynamicTools(mcpManager) {
+function createDynamicTools(mcpManager, extraTools) {
   return function getDynamicTools({ requestContext }) {
     const ctx = requestContext.get("harness");
     const state = ctx?.getState?.();
-    const modeId = ctx?.modeId ?? "build";
     const modelId = state?.currentModelId;
     const isAnthropicModel = modelId?.startsWith("anthropic/");
-    const projectPath = state?.projectPath ?? "";
-    const viewTool = chunkK4WJUBEC_cjs.createViewTool(projectPath);
-    const grepTool = chunkK4WJUBEC_cjs.createGrepTool(projectPath);
-    const globTool = chunkK4WJUBEC_cjs.createGlobTool(projectPath);
-    const executeCommandTool = chunkK4WJUBEC_cjs.createExecuteCommandTool(projectPath);
-    const writeFileTool = chunkK4WJUBEC_cjs.createWriteFileTool(projectPath);
+    const isOpenAIModel = modelId?.startsWith("openai/");
     const tools = {
-      view: viewTool,
-      search_content: grepTool,
-      find_files: globTool,
-      execute_command: executeCommandTool,
-      request_sandbox_access: chunkK4WJUBEC_cjs.requestSandboxAccessTool
+      request_sandbox_access: chunkAJEYT7X3_cjs.requestSandboxAccessTool
     };
-    if (modeId !== "plan") {
-      tools.string_replace_lsp = chunkK4WJUBEC_cjs.stringReplaceLspTool;
-      tools.ast_smart_edit = chunkK4WJUBEC_cjs.astSmartEditTool;
-      tools.write_file = writeFileTool;
-    }
-    if (chunkK4WJUBEC_cjs.hasTavilyKey()) {
-      tools.web_search = chunkK4WJUBEC_cjs.createWebSearchTool();
-      tools.web_extract = chunkK4WJUBEC_cjs.createWebExtractTool();
+    if (chunkAJEYT7X3_cjs.hasTavilyKey()) {
+      tools.web_search = chunkAJEYT7X3_cjs.createWebSearchTool();
+      tools.web_extract = chunkAJEYT7X3_cjs.createWebExtractTool();
     } else if (isAnthropicModel) {
       const anthropic$1 = anthropic.createAnthropic({});
       tools.web_search = anthropic$1.tools.webSearch_20250305();
+    } else if (isOpenAIModel) {
+      const openai$1 = openai.createOpenAI({});
+      tools.web_search = openai$1.tools.webSearch();
     }
     if (mcpManager) {
       const mcpTools = mcpManager.getTools();
       Object.assign(tools, mcpTools);
     }
-    return tools;
-  };
-}
-var mastraCodeLocalSkillsPath = path__namespace.default.join(process.cwd(), ".mastracode", "skills");
-var claudeLocalSkillsPath = path__namespace.default.join(process.cwd(), ".claude", "skills");
-var mastraCodeGlobalSkillsPath = path__namespace.default.join(os__namespace.default.homedir(), ".mastracode", "skills");
-var claudeGlobalSkillsPath = path__namespace.default.join(os__namespace.default.homedir(), ".claude", "skills");
-function collectSkillPaths(skillsDirs) {
-  const paths = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const skillsDir of skillsDirs) {
-    if (!fs4__namespace.default.existsSync(skillsDir)) continue;
-    const resolved = fs4__namespace.default.realpathSync(skillsDir);
-    if (!seen.has(resolved)) {
-      seen.add(resolved);
-      paths.push(skillsDir);
+    if (extraTools) {
+      const resolved = typeof extraTools === "function" ? extraTools({ requestContext }) : extraTools;
+      for (const [name, tool] of Object.entries(resolved)) {
+        if (!(name in tools)) {
+          tools[name] = tool;
+        }
+      }
     }
-    try {
-      const entries = fs4__namespace.default.readdirSync(skillsDir, { withFileTypes: true });
-      for (const entry of entries) {
-        if (entry.isSymbolicLink()) {
-          const linkPath = path__namespace.default.join(skillsDir, entry.name);
-          const realPath = fs4__namespace.default.realpathSync(linkPath);
-          const stat = fs4__namespace.default.statSync(realPath);
-          if (stat.isDirectory()) {
-            const realParent = path__namespace.default.dirname(realPath);
-            if (!seen.has(realParent)) {
-              seen.add(realParent);
-              paths.push(realParent);
-            }
-          }
+    const permissionRules = state?.permissionRules;
+    if (permissionRules?.tools) {
+      for (const [name, policy] of Object.entries(permissionRules.tools)) {
+        if (policy === "deny") {
+          delete tools[name];
         }
       }
-    } catch {
     }
-  }
-  return paths;
-}
-var skillPaths = collectSkillPaths([
-  mastraCodeLocalSkillsPath,
-  claudeLocalSkillsPath,
-  mastraCodeGlobalSkillsPath,
-  claudeGlobalSkillsPath
-]);
-function getDynamicWorkspace({ requestContext }) {
-  const ctx = requestContext.get("harness");
-  const state = ctx?.getState?.();
-  const projectPath = state?.projectPath;
-  if (!projectPath) {
-    throw new Error("Project path is required");
-  }
-  const sandboxPaths = state?.sandboxAllowedPaths ?? [];
-  const workspace$1 = new workspace.Workspace({
-    id: "mastra-code-workspace",
-    name: "Mastra Code Workspace",
-    filesystem: new workspace.LocalFilesystem({
-      basePath: projectPath,
-      allowedPaths: skillPaths
-    }),
-    sandbox: new workspace.LocalSandbox({
-      workingDirectory: projectPath,
-      env: process.env
-    }),
-    // Disable workspace tools — built-in tools are used instead.
-    // Workspace tools use different output formats (e.g. → separator, offset/limit params)
-    // that the TUI renderers don't fully support yet.
-    // We will update to use workspace tools very soon - just disabling until then
-    tools: { enabled: false },
-    ...skillPaths.length > 0 ? { skills: skillPaths } : {}
-  });
-  workspace$1.filesystem.setAllowedPaths([...skillPaths, ...sandboxPaths.map((p) => path__namespace.default.resolve(p))]);
-  return workspace$1;
-}
-if (skillPaths.length > 0) {
-  console.info(`Skills loaded from:`);
-  for (const p of skillPaths) {
-    console.info(`  - ${p}`);
-  }
+    return tools;
+  };
 }
 var VALID_EVENTS = [
   "PreToolUse",
@@ -691,15 +657,15 @@ function loadHooksConfig(projectDir) {
   return mergeConfigs(globalConfig, projectConfig);
 }
 function getProjectHooksPath(projectDir) {
-  return path__namespace.join(projectDir, ".mastracode", "hooks.json");
+  return path3__namespace.join(projectDir, ".mastracode", "hooks.json");
 }
 function getGlobalHooksPath() {
-  return path__namespace.join(os__namespace.homedir(), ".mastracode", "hooks.json");
+  return path3__namespace.join(os__namespace.homedir(), ".mastracode", "hooks.json");
 }
 function loadSingleConfig(filePath) {
   try {
-    if (!fs4__namespace.existsSync(filePath)) return {};
-    const raw = fs4__namespace.readFileSync(filePath, "utf-8");
+    if (!fs3__namespace.existsSync(filePath)) return {};
+    const raw = fs3__namespace.readFileSync(filePath, "utf-8");
     return validateConfig(JSON.parse(raw));
   } catch {
     return {};
@@ -996,18 +962,18 @@ function loadMcpConfig(projectDir) {
   return mergeConfigs2(claudeConfig, globalConfig, projectConfig);
 }
 function getProjectMcpPath(projectDir) {
-  return path__namespace.join(projectDir, ".mastracode", "mcp.json");
+  return path3__namespace.join(projectDir, ".mastracode", "mcp.json");
 }
 function getGlobalMcpPath() {
-  return path__namespace.join(os__namespace.homedir(), ".mastracode", "mcp.json");
+  return path3__namespace.join(os__namespace.homedir(), ".mastracode", "mcp.json");
 }
 function getClaudeSettingsPath(projectDir) {
-  return path__namespace.join(projectDir, ".claude", "settings.local.json");
+  return path3__namespace.join(projectDir, ".claude", "settings.local.json");
 }
 function loadSingleConfig2(filePath) {
   try {
-    if (!fs4__namespace.existsSync(filePath)) return {};
-    const raw = fs4__namespace.readFileSync(filePath, "utf-8");
+    if (!fs3__namespace.existsSync(filePath)) return {};
+    const raw = fs3__namespace.readFileSync(filePath, "utf-8");
     return validateConfig2(JSON.parse(raw));
   } catch {
     return {};
@@ -1016,8 +982,8 @@ function loadSingleConfig2(filePath) {
 function loadClaudeSettings(projectDir) {
   try {
     const filePath = getClaudeSettingsPath(projectDir);
-    if (!fs4__namespace.existsSync(filePath)) return {};
-    const raw = fs4__namespace.readFileSync(filePath, "utf-8");
+    if (!fs3__namespace.existsSync(filePath)) return {};
+    const raw = fs3__namespace.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed?.mcpServers && typeof parsed.mcpServers === "object") {
       return validateConfig2({ mcpServers: parsed.mcpServers });
@@ -1027,43 +993,97 @@ function loadClaudeSettings(projectDir) {
     return {};
   }
 }
+function classifyServerEntry(raw) {
+  if (!raw || typeof raw !== "object") {
+    return { kind: "skip", reason: "Invalid entry: expected an object" };
+  }
+  const obj = raw;
+  const hasCommand = typeof obj.command === "string";
+  const hasUrl = typeof obj.url === "string";
+  if (hasCommand && hasUrl) {
+    return { kind: "skip", reason: 'Cannot specify both "command" and "url"' };
+  }
+  if (hasCommand) {
+    return { kind: "stdio" };
+  }
+  if (hasUrl) {
+    try {
+      new URL(obj.url);
+    } catch {
+      return { kind: "skip", reason: `Invalid URL: "${obj.url}"` };
+    }
+    return { kind: "http" };
+  }
+  return { kind: "skip", reason: 'Missing required field: "command" (stdio) or "url" (http)' };
+}
 function validateConfig2(raw) {
   if (!raw || typeof raw !== "object") return {};
   const obj = raw;
   if (!obj.mcpServers || typeof obj.mcpServers !== "object") return {};
   const servers = {};
+  const skippedServers = [];
   const rawServers = obj.mcpServers;
   for (const [name, entry] of Object.entries(rawServers)) {
-    if (isValidServerConfig(entry)) {
+    const classification = classifyServerEntry(entry);
+    if (classification.kind === "stdio") {
+      const e = entry;
+      servers[name] = {
+        command: e.command,
+        args: Array.isArray(e.args) ? e.args : void 0,
+        env: typeof e.env === "object" && e.env !== null ? e.env : void 0
+      };
+    } else if (classification.kind === "http") {
+      const e = entry;
       servers[name] = {
-        command: entry.command,
-        args: Array.isArray(entry.args) ? entry.args : void 0,
-        env: typeof entry.env === "object" && entry.env !== null ? entry.env : void 0
+        url: e.url,
+        headers: typeof e.headers === "object" && e.headers !== null ? e.headers : void 0
       };
+    } else {
+      skippedServers.push({ name, reason: classification.reason });
     }
   }
-  if (Object.keys(servers).length === 0) return {};
-  return { mcpServers: servers };
-}
-function isValidServerConfig(raw) {
-  if (!raw || typeof raw !== "object") return false;
-  const obj = raw;
-  return typeof obj.command === "string";
+  const result = {};
+  if (Object.keys(servers).length > 0) {
+    result.mcpServers = servers;
+  }
+  if (skippedServers.length > 0) {
+    result.skippedServers = skippedServers;
+  }
+  return result;
 }
 function mergeConfigs2(...configs) {
   const merged = {};
+  const allSkipped = [];
   for (const config of configs) {
     if (config.mcpServers) {
       for (const [name, server] of Object.entries(config.mcpServers)) {
         merged[name] = server;
       }
     }
+    if (config.skippedServers) {
+      allSkipped.push(...config.skippedServers);
+    }
+  }
+  const validNames = new Set(Object.keys(merged));
+  const filteredSkipped = allSkipped.filter((s) => !validNames.has(s.name));
+  const skippedMap = /* @__PURE__ */ new Map();
+  for (const s of filteredSkipped) {
+    skippedMap.set(s.name, s);
+  }
+  const result = {};
+  if (Object.keys(merged).length > 0) {
+    result.mcpServers = merged;
   }
-  if (Object.keys(merged).length === 0) return {};
-  return { mcpServers: merged };
+  if (skippedMap.size > 0) {
+    result.skippedServers = Array.from(skippedMap.values());
+  }
+  return result;
 }
 
 // src/mcp/manager.ts
+function getTransport(cfg) {
+  return "url" in cfg ? "http" : "stdio";
+}
 function createMcpManager(projectDir) {
   let config = loadMcpConfig(projectDir);
   let client = null;
@@ -1073,7 +1093,15 @@ function createMcpManager(projectDir) {
   function buildServerDefs(servers) {
     const defs = {};
     for (const [name, cfg] of Object.entries(servers)) {
-      defs[name] = { command: cfg.command, args: cfg.args, env: cfg.env };
+      if ("url" in cfg) {
+        const httpCfg = cfg;
+        defs[name] = {
+          url: new URL(httpCfg.url),
+          requestInit: httpCfg.headers ? { headers: httpCfg.headers } : void 0
+        };
+      } else {
+        defs[name] = { command: cfg.command, args: cfg.args, env: cfg.env };
+      }
     }
     return defs;
   }
@@ -1096,7 +1124,8 @@ function createMcpManager(projectDir) {
           name,
           connected: true,
           toolCount: serverToolNames.length,
-          toolNames: serverToolNames
+          toolNames: serverToolNames,
+          transport: getTransport(servers[name])
         });
       }
     } catch (error) {
@@ -1107,6 +1136,7 @@ function createMcpManager(projectDir) {
           connected: false,
           toolCount: 0,
           toolNames: [],
+          transport: getTransport(servers[name]),
           error: errMsg
         });
       }
@@ -1141,11 +1171,16 @@ function createMcpManager(projectDir) {
       return { ...tools };
     },
     hasServers() {
-      return config.mcpServers !== void 0 && Object.keys(config.mcpServers).length > 0;
+      const hasConfigured = config.mcpServers !== void 0 && Object.keys(config.mcpServers).length > 0;
+      const hasSkipped = config.skippedServers !== void 0 && config.skippedServers.length > 0;
+      return hasConfigured || hasSkipped;
     },
     getServerStatuses() {
       return Array.from(serverStatuses.values());
     },
+    getSkippedServers() {
+      return [...config.skippedServers ?? []];
+    },
     getConfigPaths() {
       return {
         project: getProjectMcpPath(projectDir),
@@ -1203,21 +1238,21 @@ var stateSchema = zod.z.object({
     approvedAt: zod.z.string()
   }).nullable().default(null)
 });
-var CACHE_DIR = path__namespace.default.join(os__namespace.default.homedir(), ".cache", "mastra");
-var CACHE_FILE = path__namespace.default.join(CACHE_DIR, "gateway-refresh-time");
-var GLOBAL_PROVIDER_REGISTRY_JSON = path__namespace.default.join(CACHE_DIR, "provider-registry.json");
-var GLOBAL_PROVIDER_TYPES_DTS = path__namespace.default.join(CACHE_DIR, "provider-types.generated.d.ts");
+var CACHE_DIR = path3__namespace.default.join(os__namespace.default.homedir(), ".cache", "mastra");
+var CACHE_FILE = path3__namespace.default.join(CACHE_DIR, "gateway-refresh-time");
+var GLOBAL_PROVIDER_REGISTRY_JSON = path3__namespace.default.join(CACHE_DIR, "provider-registry.json");
+var GLOBAL_PROVIDER_TYPES_DTS = path3__namespace.default.join(CACHE_DIR, "provider-types.generated.d.ts");
 var DEFAULT_SYNC_INTERVAL_MS = 5 * 60 * 1e3;
 var isSyncing = false;
 async function atomicWriteFile(filePath, content) {
   const randomSuffix = Math.random().toString(36).substring(2, 15);
   const tempPath = `${filePath}.${process.pid}.${Date.now()}.${randomSuffix}.tmp`;
   try {
-    await fs4__namespace.default.promises.writeFile(tempPath, content, "utf-8");
-    await fs4__namespace.default.promises.rename(tempPath, filePath);
+    await fs3__namespace.default.promises.writeFile(tempPath, content, "utf-8");
+    await fs3__namespace.default.promises.rename(tempPath, filePath);
   } catch (error) {
     try {
-      await fs4__namespace.default.promises.unlink(tempPath);
+      await fs3__namespace.default.promises.unlink(tempPath);
     } catch {
     }
     throw error;
@@ -1282,10 +1317,10 @@ export type ModelForProvider<P extends Provider> = ProviderModelsMap[P][number];
 }
 function getLastSyncTime() {
   try {
-    if (!fs4__namespace.default.existsSync(CACHE_FILE)) {
+    if (!fs3__namespace.default.existsSync(CACHE_FILE)) {
       return null;
     }
-    const timestamp = fs4__namespace.default.readFileSync(CACHE_FILE, "utf-8").trim();
+    const timestamp = fs3__namespace.default.readFileSync(CACHE_FILE, "utf-8").trim();
     return new Date(parseInt(timestamp, 10));
   } catch {
     return null;
@@ -1293,10 +1328,10 @@ function getLastSyncTime() {
 }
 function saveLastSyncTime(date) {
   try {
-    if (!fs4__namespace.default.existsSync(CACHE_DIR)) {
-      fs4__namespace.default.mkdirSync(CACHE_DIR, { recursive: true });
+    if (!fs3__namespace.default.existsSync(CACHE_DIR)) {
+      fs3__namespace.default.mkdirSync(CACHE_DIR, { recursive: true });
     }
-    fs4__namespace.default.writeFileSync(CACHE_FILE, date.getTime().toString(), "utf-8");
+    fs3__namespace.default.writeFileSync(CACHE_FILE, date.getTime().toString(), "utf-8");
   } catch (error) {
     console.warn("[GatewaySync] Failed to save sync time:", error);
   }
@@ -1317,7 +1352,7 @@ async function syncGateways(force = false) {
   isSyncing = true;
   try {
     const { providers, models } = await fetchProvidersFromGateways();
-    await fs4__namespace.default.promises.mkdir(CACHE_DIR, { recursive: true });
+    await fs3__namespace.default.promises.mkdir(CACHE_DIR, { recursive: true });
     const registryData = {
       providers,
       models,
@@ -1399,45 +1434,40 @@ var PROVIDER_TO_OAUTH_ID = {
 async function createMastraCode(config) {
   const cwd = config?.cwd ?? process.cwd();
   const authStorage = new chunkS5ZLN7DR_cjs.AuthStorage();
-  chunkK4WJUBEC_cjs.setAuthStorage(authStorage);
-  chunkK4WJUBEC_cjs.setAuthStorage2(authStorage);
+  chunkAJEYT7X3_cjs.setAuthStorage(authStorage);
+  chunkAJEYT7X3_cjs.setAuthStorage2(authStorage);
   const project = chunkS5ZLN7DR_cjs.detectProject(cwd);
   const resourceIdOverride = chunkS5ZLN7DR_cjs.getResourceIdOverride(project.rootPath);
   if (resourceIdOverride) {
     project.resourceId = resourceIdOverride;
     project.resourceIdOverride = true;
   }
-  const globalSettings = chunkK4WJUBEC_cjs.loadSettings();
+  const globalSettings = chunkAJEYT7X3_cjs.loadSettings();
   const storageConfig = config?.storage ?? chunkS5ZLN7DR_cjs.getStorageConfig(project.rootPath, globalSettings.storage);
   const storageResult = await createStorage(storageConfig);
   const storage = storageResult.storage;
   const storageWarning = storageResult.warning;
   const memory = getDynamicMemory(storage);
   const mcpManager = config?.disableMcp ? void 0 : createMcpManager(project.rootPath);
-  const codeAgentInstance = new agent.Agent({
+  const codeAgent = new agent.Agent({
     id: "code-agent",
     name: "Code Agent",
     instructions: getDynamicInstructions,
-    model: chunkK4WJUBEC_cjs.getDynamicModel,
-    tools: createDynamicTools(mcpManager)
-  });
-  const mastraInstance = new core.Mastra({
-    agents: { codeAgentInstance },
-    logger: logger.noopLogger,
-    storage
+    model: chunkAJEYT7X3_cjs.getDynamicModel,
+    tools: createDynamicTools(mcpManager, config?.extraTools)
   });
-  const codeAgent = mastraInstance.getAgent("codeAgentInstance");
   const hookManager = config?.disableHooks ? void 0 : new HookManager(project.rootPath, "session-init");
   if (hookManager?.hasHooks()) {
     const hookConfig = hookManager.getConfig();
     const hookCount = Object.values(hookConfig).reduce((sum, hooks) => sum + (hooks?.length ?? 0), 0);
     console.info(`Hooks: ${hookCount} hook(s) configured`);
   }
-  const viewTool = chunkK4WJUBEC_cjs.createViewTool(project.rootPath);
-  const grepTool = chunkK4WJUBEC_cjs.createGrepTool(project.rootPath);
-  const globTool = chunkK4WJUBEC_cjs.createGlobTool(project.rootPath);
-  const executeCommandTool = chunkK4WJUBEC_cjs.createExecuteCommandTool(project.rootPath);
-  const writeFileTool = chunkK4WJUBEC_cjs.createWriteFileTool(project.rootPath);
+  const viewTool = chunkAJEYT7X3_cjs.createViewTool(project.rootPath);
+  const grepTool = chunkAJEYT7X3_cjs.createGrepTool(project.rootPath);
+  const globTool = chunkAJEYT7X3_cjs.createGlobTool(project.rootPath);
+  const executeCommandTool = chunkAJEYT7X3_cjs.createExecuteCommandTool(project.rootPath);
+  const writeFileTool = chunkAJEYT7X3_cjs.createWriteFileTool(project.rootPath);
+  const stringReplaceLspTool = chunkAJEYT7X3_cjs.createStringReplaceLspTool(project.rootPath);
   const readOnlyTools = {
     view: viewTool,
     search_content: grepTool,
@@ -1445,27 +1475,27 @@ async function createMastraCode(config) {
   };
   const defaultSubagents = [
     {
-      id: chunkK4WJUBEC_cjs.exploreSubagent.id,
-      name: chunkK4WJUBEC_cjs.exploreSubagent.name,
+      id: chunkAJEYT7X3_cjs.exploreSubagent.id,
+      name: chunkAJEYT7X3_cjs.exploreSubagent.name,
       description: "Read-only codebase exploration. Use for questions like 'find all usages of X', 'how does module Y work'.",
-      instructions: chunkK4WJUBEC_cjs.exploreSubagent.instructions,
+      instructions: chunkAJEYT7X3_cjs.exploreSubagent.instructions,
       tools: readOnlyTools
     },
     {
-      id: chunkK4WJUBEC_cjs.planSubagent.id,
-      name: chunkK4WJUBEC_cjs.planSubagent.name,
+      id: chunkAJEYT7X3_cjs.planSubagent.id,
+      name: chunkAJEYT7X3_cjs.planSubagent.name,
       description: "Read-only analysis and planning. Use for 'create an implementation plan for X', 'analyze the architecture of Y'.",
-      instructions: chunkK4WJUBEC_cjs.planSubagent.instructions,
+      instructions: chunkAJEYT7X3_cjs.planSubagent.instructions,
       tools: readOnlyTools
     },
     {
-      id: chunkK4WJUBEC_cjs.executeSubagent.id,
-      name: chunkK4WJUBEC_cjs.executeSubagent.name,
+      id: chunkAJEYT7X3_cjs.executeSubagent.id,
+      name: chunkAJEYT7X3_cjs.executeSubagent.name,
       description: "Task execution with write capabilities. Use for 'implement feature X', 'fix bug Y', 'refactor module Z'.",
-      instructions: chunkK4WJUBEC_cjs.executeSubagent.instructions,
+      instructions: chunkAJEYT7X3_cjs.executeSubagent.instructions,
       tools: {
         ...readOnlyTools,
-        string_replace_lsp: chunkK4WJUBEC_cjs.stringReplaceLspTool,
+        string_replace_lsp: stringReplaceLspTool,
         write_file: writeFileTool,
         execute_command: executeCommandTool,
         task_write: harness.taskWriteTool,
@@ -1479,21 +1509,21 @@ async function createMastraCode(config) {
       name: "Build",
       default: true,
       defaultModelId: "anthropic/claude-opus-4-6",
-      color: chunkK4WJUBEC_cjs.mastra.purple,
+      color: chunkAJEYT7X3_cjs.mastra.purple,
       agent: codeAgent
     },
     {
       id: "plan",
       name: "Plan",
       defaultModelId: "openai/gpt-5.2-codex",
-      color: chunkK4WJUBEC_cjs.mastra.blue,
+      color: chunkAJEYT7X3_cjs.mastra.blue,
       agent: codeAgent
     },
     {
       id: "fast",
       name: "Fast",
       defaultModelId: "cerebras/zai-glm-4.7",
-      color: chunkK4WJUBEC_cjs.mastra.green,
+      color: chunkAJEYT7X3_cjs.mastra.green,
       agent: codeAgent
     }
   ];
@@ -1511,10 +1541,22 @@ async function createMastraCode(config) {
     google: process.env.GOOGLE_GENERATIVE_AI_API_KEY ? "apikey" : false,
     deepseek: process.env.DEEPSEEK_API_KEY ? "apikey" : false
   };
-  const builtinPacks = chunkK4WJUBEC_cjs.getAvailableModePacks(startupAccess);
-  const builtinOmPacks = chunkK4WJUBEC_cjs.getAvailableOmPacks(startupAccess);
-  const effectiveDefaults = chunkK4WJUBEC_cjs.resolveModelDefaults(globalSettings, builtinPacks);
-  const effectiveOmModel = chunkK4WJUBEC_cjs.resolveOmModel(globalSettings, builtinOmPacks);
+  try {
+    const registry = llm.PROVIDER_REGISTRY;
+    for (const [provider, config2] of Object.entries(registry)) {
+      if (startupAccess[provider] && startupAccess[provider] !== false) continue;
+      const envVars = config2?.apiKeyEnvVar;
+      const envVarList = Array.isArray(envVars) ? envVars : envVars ? [envVars] : [];
+      if (envVarList.some((envVar) => process.env[envVar])) {
+        startupAccess[provider] = "apikey";
+      }
+    }
+  } catch {
+  }
+  const builtinPacks = chunkAJEYT7X3_cjs.getAvailableModePacks(startupAccess);
+  const builtinOmPacks = chunkAJEYT7X3_cjs.getAvailableOmPacks(startupAccess);
+  const effectiveDefaults = chunkAJEYT7X3_cjs.resolveModelDefaults(globalSettings, builtinPacks);
+  const effectiveOmModel = chunkAJEYT7X3_cjs.resolveOmModel(globalSettings, builtinOmPacks);
   const modes = (config?.modes ?? defaultModes).map((mode) => {
     const savedModel = effectiveDefaults[mode.id];
     return savedModel ? { ...mode, defaultModelId: savedModel } : mode;
@@ -1547,8 +1589,8 @@ async function createMastraCode(config) {
     memory,
     stateSchema,
     subagents,
-    resolveModel: chunkK4WJUBEC_cjs.resolveModel,
-    toolCategoryResolver: chunkMT3YCFCC_cjs.getToolCategory,
+    resolveModel: chunkAJEYT7X3_cjs.resolveModel,
+    toolCategoryResolver: chunkOEDRHUU5_cjs.getToolCategory,
     initialState: {
       projectPath: project.rootPath,
       projectName: project.name,
@@ -1557,7 +1599,7 @@ async function createMastraCode(config) {
       ...globalInitialState,
       ...config?.initialState
     },
-    workspace: getDynamicWorkspace,
+    workspace: config?.workspace ?? chunkAJEYT7X3_cjs.getDynamicWorkspace,
     modes,
     heartbeatHandlers: config?.heartbeatHandlers ?? defaultHeartbeatHandlers,
     modelAuthChecker: (provider) => {
@@ -1565,12 +1607,44 @@ async function createMastraCode(config) {
       if (oauthId && authStorage.isLoggedIn(oauthId)) {
         return true;
       }
+      const customProvider = chunkAJEYT7X3_cjs.loadSettings().customProviders.find((entry) => {
+        return provider === chunkAJEYT7X3_cjs.getCustomProviderId(entry.name);
+      });
+      if (customProvider) {
+        return true;
+      }
       return void 0;
     },
-    modelUseCountProvider: () => chunkK4WJUBEC_cjs.loadSettings().modelUseCounts,
+    modelUseCountProvider: () => chunkAJEYT7X3_cjs.loadSettings().modelUseCounts,
+    modelUseCountTracker: (modelId) => {
+      try {
+        const settings = chunkAJEYT7X3_cjs.loadSettings();
+        settings.modelUseCounts[modelId] = (settings.modelUseCounts[modelId] ?? 0) + 1;
+        chunkAJEYT7X3_cjs.saveSettings(settings);
+      } catch (error) {
+        console.error("Failed to persist model usage count", error);
+      }
+    },
+    customModelCatalogProvider: () => {
+      const settings = chunkAJEYT7X3_cjs.loadSettings();
+      const customModels = [];
+      for (const provider of settings.customProviders) {
+        const providerId = chunkAJEYT7X3_cjs.getCustomProviderId(provider.name);
+        for (const modelName of provider.models) {
+          customModels.push({
+            id: chunkAJEYT7X3_cjs.toCustomProviderModelId(provider.name, modelName),
+            provider: providerId,
+            modelName,
+            hasApiKey: true,
+            apiKeyEnvVar: void 0
+          });
+        }
+      }
+      return customModels;
+    },
     threadLock: {
-      acquire: chunkK4WJUBEC_cjs.acquireThreadLock,
-      release: chunkK4WJUBEC_cjs.releaseThreadLock
+      acquire: chunkAJEYT7X3_cjs.acquireThreadLock,
+      release: chunkAJEYT7X3_cjs.releaseThreadLock
     }
   });
   if (hookManager) {
@@ -1582,9 +1656,9 @@ async function createMastraCode(config) {
       }
     });
   }
-  return { harness: harness$1, mcpManager, hookManager, authStorage, storageWarning };
+  return { harness: harness$1, mcpManager, hookManager, authStorage, resolveModel: chunkAJEYT7X3_cjs.resolveModel, storageWarning };
 }
 
 exports.createMastraCode = createMastraCode;
-//# sourceMappingURL=chunk-Z4QRXVST.cjs.map
-//# sourceMappingURL=chunk-Z4QRXVST.cjs.map
+//# sourceMappingURL=chunk-MBPGUMYQ.cjs.map
+//# sourceMappingURL=chunk-MBPGUMYQ.cjs.map